Heritage Collection

Information document pursuant to Article 13 of Regulation (EU) 2016/679 (GDPR)

According to the General Data Protection Regulation (GDPR), we provide you with the following information regarding the processing of the personal data that you will provide us in our registration form for those taking part in our events. his notice, dedicated to those who wish to register, through our site, for our events, is integrated with the privacy policy for navigation on the website. With specific reference to the purpose of direct marketing through electronic means, this information is also intended for legal persons, in accordance with the provisions of Directive 2002/58/EC (e-Privacy Directive) as transposed into Italian law within the Privacy Code.

1. DATA CONTROLLER Molteni & C S.p.A., with registered office in Rossini 50 - Giussano (MB), duly represented by its legal representative. You can reach the Data Controller at the following contacts: T +39 0362 3591 - F +39 0362 354448 - email address: privacy@molteni.it

2.CATEGORIES OF PERSONAL DATA PROCESSED

Personal Data: any information concerning an identified or identifiable natural person (“data subject”); An identifiable natural person is one who “can directly or indirectly be identified, in particular by reference to an identifier such as a name, an identification number, a location data, an online identifier or to one or more specific factors to the physical, physiological, genetic, mental, economic, cultural or social identity” (article 4 par. 1.1 GDPR). In particular, we will process your following personal data: Data indicated in the registration form on the site (e.g. name, surname, e-mail address). The data needed for registration will be indicated as “mandatory”. For information on the processing carried out on our website, you can consult the related privacy policy here. For information on the cookies used by this website, you can read our cookie policy here.

3. HOW WE USE YOUR PERSONAL INFORMATION: PURPOSES OF PROCESSING | LEGAL BASIS | DATA RETENTION PERIOD | PROVISION OF PERSONAL DATA

4.RECIPIENTS OF PERSONAL DATA

We share your personal information with employees and/or staff acting under the Data Controller’s authority (duly instructed for the former purposes, also according to article 29 GDPR), as well as third parties contractually linked to Molteni, in order to fulfill contractual obligations and achieve one or more of the aforesaid purposes of processing. In particular, we disclose personal information to the following categories of recipients: - companies within Molteni Group (only upon your consent, as indicated under purpose D of this privacy policy); - subjects providing services to manage the information system used by the controller and communication networks (including e-mail, web platforms, cloud and software); - offices or companies in the context of assistance and consultancy relationships; - social networks; - relevant authorities in order to comply with legal obligations and/or provisions of public bodies, upon request. The abovementioned recipients could act as Data Processor (appointed pursuant to art. 28 GDPR) or as independent Data Controller(s). The complete list of the recipients is regularly updated and available upon request at the contact details indicated paragraph 1. of this Privacy Policy.

5.TRANSFERS OF PERSONAL DATA TO THIRD COUNTRIES

Personal data provided will not transferred outside the European Economic Area (EEA).

6. AUTOMATED PROCESS

Personal data will be subjected to paper, traditional manual, electronic and automated processing. It should be noted that, with reference to the profiling activity, it will be carried out through the intervention of an operator who, with the consent of the data subject, will process his/her data for the purpose of internal analysis and to divide them into homogeneous groups for specific characteristics (e.g. profession and origin), for better management of services and for sending tailored promotional communications. We do not take any decision based solely on automated processing, including profiling since our profiling activity will take place - upon data subject’s consent - with the intervention of a human operator.

7.RIGHTS OF DATA SUBJECTS

You have the right, at any time, to obtain from Molteni the access to your personal data (article 15 GDPR), request their rectification (article 16 GDPR), their erasure (article 17 GDPR) or restriction of their processing (article 18 GDPR). Furthermore, you have the right to object anytime to your personal data processing (article 21 GDPR), as well as the right not to be subject to automated processing, including profiling, without your prior consent (article 22 GDPR) voluntarily provided. Finally, you have the right to data portability, if applicable (article 20 GDPR). Furthermore, you have the right to lodge a complaint with the Italian Data Protection Authority (https://www.garanteprivacy.it/), or to take legal action according to art. 78 and 79 GDPR. To withdraw consent to non-automated profiling, it will be sufficient to write an e-mail at any time to the address privacy@molteni.it with the subject “no profiling”. To stop receiving direct marketing (both automated and traditional means) you can write an e-mail at any time to the address privacy@molteni.it with the subject "unsubscribe from direct marketing" or use our automatic unsubscribe systems (only for email) and you will no longer be disturbed.

8. CHANGES TO THE PRIVACY POLICY

We may revise this privacy policy from time to time. We will notify you of changes by posting the effective date of the latest version here below or at the top of this privacy policy.

Effective date: July 27th, 2021

Molteni & C. S.p.A.